A 



IN THE UNITED STATES PATENT AND TRADEMARK OFFICE 



In re Application 

Inventor(s): John S. Flowers et al. 

SC/Serial No.: 09/757,872 
Filed: January 10, 2001 

Title: QUERY-BASED RULES FOR USE 

IN NETWORK SECURITY SYSTEMS 



) PATENT APPLICATION 
) 

) Art Unit: 2131 

) Examiner: Unassigned 

) 

) Customer No. 23910 
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CERTIFICATE OF MAILING UNDER 37 C.F.R. §1.8 

I hereby certify that this correspondence is being deposited in the United States Postal Service with sufficient 
postage as first class mail in an envelope addressed to Commissioner for Patenm, Washington, DC 20231, on May 7 f 
2001. " "~ 




SaraH^BarcTne SchwartzrReg^No. 40,284^ 
^Signature Date: May 7, 2001 



INFORMATION DISCLOSURE STATEMENT UNDER 37 C.F.R. §1.56 

Commissioner for Patents 
Washington, DC 20231 

Sir: 

It is requested that the information identified in this statement be considered by the 
Examiner and made of record in the above-identified application. This statement is not intended 
to represent that a search has been made or that the information cited in the statement is, or is 
considered to be, material to patentability as defined in 37 C.F.R. §1.56. 

Enclosed with this statement are the following: 

S Form PTO-1449. The Examiner is requested to initial the form and return it to the 
undersigned in accordance with M.P.E.P. §609. 

S A copy of each cited document as required by 37 C.F.R. § 1 .98. Copies are not submitted 
of U.S. applications, 37 C.F.R. §1.98(a)(2)(iii), and copies are not submitted of 
documents already cited or submitted in a parent application from which benefit under 
35 U.S.C. §120 is claimed, 37 C.F.R. §1 .98(d). If any of the cited/submitted documents 
is in a foreign language, a concise explanation of relevancy is provided pursuant to 37 
C.F.R. § 1 .98(a)(3). For foreign language documents cited in a search report by a foreign 
patent office, the requirement for a concise explanation of relevance is satisfied by the 
submission herewith of an English language version of the search report. MPEP 
§609A(3). If a written English-language translation of a non-English language document, 
or portion thereof, is within the possession, custody or control of, or is readily available 
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to any individual designated in § 1.56(c), a copy of the translation accompanies this 
statement. 37 C.F.R. § 1.98(c). 

This statement should be considered because: 

S This statement qualifies under 37 C.F.R. §1 .97, subsection (b) because: 

(1) It is being filed within 3 months of the application filing date; 

OR 

(2) It is being filed within 3 months of entry of a national stage; 

- OR - 

(3) It is being filed before the mailing date of the first Office Action on the 
merits, 

- OR -- 

(4) It is being filed before the mailing date of the first Office Action after the 
filing of a Request for Continued Examination under 37 C.F.R. §1.114, 

whichever occurs last. 

Although it may not qualify under subsection (b), this statement qualifies under 37 C.F.R. 

§ 1 .97, subsection (c) because: 

(1) It is being filed before the mailing date of a FINAL Office Action and 
before a Notice of Allowance (whichever occurs first) 

- AND (check at least one of the following) — 

(1) It is accompanied by the $240 fee set forth in 37 C.F.R. §1.17(p) 

- OR -- 

(2) It is accompanied by a STATEMENT as set forth in 37 C.F.R. § 1 .97(e) 

Although it may not qualify under subsection (b) or (c), this statement qualifies under 37 

C.F.R. §1.97. subsection (cO because: 

(1) It is accompanied by a STATEMENT as set forth in 37 C.F.R. § 1.97(e); 

— AND — 

(2) It is accompanied by a PETITION TO ACCEPT INFORMATION 
DISCLOSURE STATEMENT UNDER 37 C.F.R. § 1.97(d); 

-- AND — 

(3) It is accompanied by the $130 fee set forth in 37 C.F.R. §1.17(i)(l); 

AND-- 

(4) The Issue Fee has not yet been paid. 
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y Fee Authorization. The Commissioner is hereby authorized to charge underpayment of 
any additional fees or credit any overpayment associated with this communication to 
Deposit Account No. 06-1325. A duplicate copy of this authorization is enclosed. 



Date: 



May 7. 2001 



Respectfully submitted, 

FLIESLER, DUBB, MEYER & LOVEJOY LLP 



Bv T" ^ 

^SSj^^aror^Sqh^artz- 
^^eg. NoT40;2'84 
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Form PTO-1449 
(Substitute) 



U.S. DEPARTMENT OF COMMERCE 
PATENT AND TRADEMARK OFFICE 



INFORMATION DISCLOSURE STATEMENT 
BY APPLICANT 

(Use several sheets if necessary) 



Attorney Docket Number 

HVWD-01003US0 



Serial/Patent Number 

09/757,872 



Applicant/Patent Owner 

John S. Flowers et al. 



Filing/Issue Date 

January 10, 2001 



Group Art Unit 

2131 
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OTHER DOCUMENTS (Include Author, Title, Date, Pertinent pages, etc. ) 



Rebecca Bace, Infidel, Inc. "An Introduction to Intrusion Detection and Assessment", 1999, 38 pages. 



Fyodor, "Remote OS detection via TCP/IP Stack FingerPrinting", October 18, 1998, lOpages. 



Examiner 



Date Considered 



♦EXAMINER: Initial if citation considered, whether or not citation is in conformance with MPEP 609. Draw line through citation if not in conformance and 
not considered. Include copy of this form with next communication to applicant. 

*1 = Copy not submitted because it was submitted in prior application SN _/ , filed , 19 

*2 = Copy not submitted because it was submitted in prior application SN _/ . filed ,19 
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